@qmuse/appwrite-runtime-sdk 1.0.1 → 1.0.2

package/dist/runtime.js

@@ -6,6 +6,12 @@ import _asyncToGenerator from "@babel/runtime/helpers/esm/asyncToGenerator";
 import _typeof from "@babel/runtime/helpers/esm/typeof";
 import { ID, Permission, Query, Role } from 'appwrite';
 var BLOCKED_MUTATION_FIELDS = new Set(['code', 'creatorId', 'modifierId', 'gmtCreate', 'gmtModified']);
+var SENSITIVE_AUDIT_FIELD_PATTERN = /(?:password|passwd|secret|token|authorization|cookie|api[-_]?key|access[-_]?key|private[-_]?key)/i;
+var REDACTED_AUDIT_VALUE = '[REDACTED]';
+var MAX_AUDIT_DEPTH = 5;
+var MAX_AUDIT_KEYS = 100;
+var MAX_AUDIT_ARRAY_ITEMS = 100;
+var MAX_AUDIT_STRING_LENGTH = 2048;
 function isRecord(value) {
   return Boolean(value) && _typeof(value) === 'object' && !Array.isArray(value);
 }
@@ -60,6 +66,50 @@ function sanitizeBusinessRowData(data) {
     return !key.startsWith('$') && !BLOCKED_MUTATION_FIELDS.has(key);
   }));
 }
+function sanitizeAuditValue(value, depth, ancestors) {
+  if (typeof value === 'string') {
+    return value.length > MAX_AUDIT_STRING_LENGTH ? "".concat(value.slice(0, MAX_AUDIT_STRING_LENGTH), "[TRUNCATED]") : value;
+  }
+  if (depth >= MAX_AUDIT_DEPTH && (Array.isArray(value) || isRecord(value))) {
+    return '[MAX_DEPTH]';
+  }
+  if (Array.isArray(value)) {
+    if (ancestors.has(value)) {
+      return '[CIRCULAR]';
+    }
+    ancestors.add(value);
+    var _result = value.slice(0, MAX_AUDIT_ARRAY_ITEMS).map(function (item) {
+      return sanitizeAuditValue(item, depth + 1, ancestors);
+    });
+    ancestors.delete(value);
+    if (value.length > MAX_AUDIT_ARRAY_ITEMS) {
+      _result.push('[TRUNCATED]');
+    }
+    return _result;
+  }
+  if (!isRecord(value)) {
+    return value;
+  }
+  if (ancestors.has(value)) {
+    return '[CIRCULAR]';
+  }
+  ancestors.add(value);
+  var entries = Object.entries(value).slice(0, MAX_AUDIT_KEYS);
+  var result = Object.fromEntries(entries.map(function (_ref4) {
+    var _ref5 = _slicedToArray(_ref4, 2),
+      key = _ref5[0],
+      childValue = _ref5[1];
+    return [key, SENSITIVE_AUDIT_FIELD_PATTERN.test(key) ? REDACTED_AUDIT_VALUE : sanitizeAuditValue(childValue, depth + 1, ancestors)];
+  }));
+  ancestors.delete(value);
+  if (Object.keys(value).length > MAX_AUDIT_KEYS) {
+    result.__auditTruncated = true;
+  }
+  return result;
+}
+function sanitizeMutationAuditData(data) {
+  return sanitizeAuditValue(data, 0, new WeakSet());
+}
 export function createQmuseAppwriteRuntime(options) {
   var _options$fetch;
   var client = options.client,
@@ -373,12 +423,12 @@ export function createQmuseAppwriteRuntime(options) {
     return _ensureAuthenticatedSession.apply(this, arguments);
   }
   function _ensureAuthenticatedSession() {
-    _ensureAuthenticatedSession = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee7(_ref4) {
-      var qmuseUserId, userId, secret, _ref4$forceReplace, forceReplace;
+    _ensureAuthenticatedSession = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee7(_ref6) {
+      var qmuseUserId, userId, secret, _ref6$forceReplace, forceReplace;
       return _regeneratorRuntime().wrap(function _callee7$(_context7) {
         while (1) switch (_context7.prev = _context7.next) {
           case 0:
-            qmuseUserId = _ref4.qmuseUserId, userId = _ref4.userId, secret = _ref4.secret, _ref4$forceReplace = _ref4.forceReplace, forceReplace = _ref4$forceReplace === void 0 ? false : _ref4$forceReplace;
+            qmuseUserId = _ref6.qmuseUserId, userId = _ref6.userId, secret = _ref6.secret, _ref6$forceReplace = _ref6.forceReplace, forceReplace = _ref6$forceReplace === void 0 ? false : _ref6$forceReplace;
             if (state.currentUser) {
               _context7.next = 4;
               break;
@@ -657,13 +707,14 @@ export function createQmuseAppwriteRuntime(options) {
     }));
     return _withSessionRetry.apply(this, arguments);
   }
-  function scheduleMutationAudit(_ref5) {
-    var operation = _ref5.operation,
-      tableId = _ref5.tableId,
-      rowId = _ref5.rowId,
-      outcome = _ref5.outcome,
-      durationMs = _ref5.durationMs,
-      errorCode = _ref5.errorCode;
+  function scheduleMutationAudit(_ref7) {
+    var operation = _ref7.operation,
+      tableId = _ref7.tableId,
+      rowId = _ref7.rowId,
+      outcome = _ref7.outcome,
+      durationMs = _ref7.durationMs,
+      errorCode = _ref7.errorCode,
+      mutationData = _ref7.mutationData;
     var runtime = getMuseRuntime();
     globalThis.setTimeout(function () {
       try {
@@ -674,7 +725,7 @@ export function createQmuseAppwriteRuntime(options) {
           headers: {
             'Content-Type': 'application/json'
           },
-          body: JSON.stringify(_objectSpread({
+          body: JSON.stringify(_objectSpread(_objectSpread({
             schemaVersion: 1,
             operation: operation,
             outcome: outcome,
@@ -685,6 +736,8 @@ export function createQmuseAppwriteRuntime(options) {
             durationMs: durationMs
           }, errorCode === undefined ? {} : {
             errorCode: errorCode
+          }), mutationData === undefined ? {} : {
+            mutationData: mutationData
           }))
         })).catch(function () {
           return undefined;
@@ -698,12 +751,12 @@ export function createQmuseAppwriteRuntime(options) {
     return _observeMutation.apply(this, arguments);
   }
   function _observeMutation() {
-    _observeMutation = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee15(_ref6) {
-      var operation, tableId, rowId, task, startedAt, result, _getErrorCode;
+    _observeMutation = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee15(_ref8) {
+      var operation, tableId, rowId, mutationData, task, startedAt, result, _getErrorCode;
       return _regeneratorRuntime().wrap(function _callee15$(_context15) {
         while (1) switch (_context15.prev = _context15.next) {
           case 0:
-            operation = _ref6.operation, tableId = _ref6.tableId, rowId = _ref6.rowId, task = _ref6.task;
+            operation = _ref8.operation, tableId = _ref8.tableId, rowId = _ref8.rowId, mutationData = _ref8.mutationData, task = _ref8.task;
             startedAt = Date.now();
             _context15.prev = 2;
             _context15.next = 5;
@@ -715,7 +768,8 @@ export function createQmuseAppwriteRuntime(options) {
               tableId: tableId,
               rowId: rowId,
               outcome: 'success',
-              durationMs: Date.now() - startedAt
+              durationMs: Date.now() - startedAt,
+              mutationData: mutationData
             });
             return _context15.abrupt("return", result);
           case 10:
@@ -727,7 +781,8 @@ export function createQmuseAppwriteRuntime(options) {
               rowId: rowId,
               outcome: 'failure',
               durationMs: Date.now() - startedAt,
-              errorCode: (_getErrorCode = getErrorCode(_context15.t0)) !== null && _getErrorCode !== void 0 ? _getErrorCode : undefined
+              errorCode: (_getErrorCode = getErrorCode(_context15.t0)) !== null && _getErrorCode !== void 0 ? _getErrorCode : undefined,
+              mutationData: mutationData
             });
             throw _context15.t0;
           case 14:
@@ -742,12 +797,12 @@ export function createQmuseAppwriteRuntime(options) {
     return _listRows.apply(this, arguments);
   }
   function _listRows() {
-    _listRows = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee16(_ref7) {
-      var tableId, _ref7$queries, queries, _ref7$limit, limit, cursor, _yield$getClients, databaseId;
+    _listRows = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee16(_ref9) {
+      var tableId, _ref9$queries, queries, _ref9$limit, limit, cursor, _yield$getClients, databaseId;
       return _regeneratorRuntime().wrap(function _callee16$(_context16) {
         while (1) switch (_context16.prev = _context16.next) {
           case 0:
-            tableId = _ref7.tableId, _ref7$queries = _ref7.queries, queries = _ref7$queries === void 0 ? [] : _ref7$queries, _ref7$limit = _ref7.limit, limit = _ref7$limit === void 0 ? 20 : _ref7$limit, cursor = _ref7.cursor;
+            tableId = _ref9.tableId, _ref9$queries = _ref9.queries, queries = _ref9$queries === void 0 ? [] : _ref9$queries, _ref9$limit = _ref9.limit, limit = _ref9$limit === void 0 ? 20 : _ref9$limit, cursor = _ref9.cursor;
             if (!(!Number.isInteger(limit) || limit < 1 || limit > 20)) {
               _context16.next = 3;
               break;
@@ -778,12 +833,12 @@ export function createQmuseAppwriteRuntime(options) {
     return _getRow.apply(this, arguments);
   }
   function _getRow() {
-    _getRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee17(_ref8) {
+    _getRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee17(_ref10) {
       var tableId, rowId, _yield$getClients2, databaseId;
       return _regeneratorRuntime().wrap(function _callee17$(_context17) {
         while (1) switch (_context17.prev = _context17.next) {
           case 0:
-            tableId = _ref8.tableId, rowId = _ref8.rowId;
+            tableId = _ref10.tableId, rowId = _ref10.rowId;
             _context17.next = 3;
             return getClients();
           case 3:
@@ -808,21 +863,23 @@ export function createQmuseAppwriteRuntime(options) {
     return _createRow.apply(this, arguments);
   }
   function _createRow() {
-    _createRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee18(_ref9) {
-      var tableId, data, _ref9$rowId, rowId, _yield$getClients3, databaseId;
+    _createRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee18(_ref11) {
+      var tableId, data, _ref11$rowId, rowId, _yield$getClients3, databaseId, mutationData;
       return _regeneratorRuntime().wrap(function _callee18$(_context18) {
         while (1) switch (_context18.prev = _context18.next) {
           case 0:
-            tableId = _ref9.tableId, data = _ref9.data, _ref9$rowId = _ref9.rowId, rowId = _ref9$rowId === void 0 ? ID.unique() : _ref9$rowId;
+            tableId = _ref11.tableId, data = _ref11.data, _ref11$rowId = _ref11.rowId, rowId = _ref11$rowId === void 0 ? ID.unique() : _ref11$rowId;
             _context18.next = 3;
             return getClients();
           case 3:
             _yield$getClients3 = _context18.sent;
             databaseId = _yield$getClients3.databaseId;
+            mutationData = sanitizeBusinessRowData(data);
             return _context18.abrupt("return", observeMutation({
               operation: 'create',
               tableId: tableId,
               rowId: rowId,
+              mutationData: sanitizeMutationAuditData(mutationData),
               task: function task() {
                 return withSessionRetry(function () {
                   var currentUserId = getCurrentUser().$id;
@@ -831,7 +888,7 @@ export function createQmuseAppwriteRuntime(options) {
                     databaseId: databaseId,
                     tableId: tableId,
                     rowId: rowId,
-                    data: _objectSpread(_objectSpread({}, sanitizeBusinessRowData(data)), {}, {
+                    data: _objectSpread(_objectSpread({}, mutationData), {}, {
                       creatorId: currentUserId,
                       modifierId: currentUserId
                     }),
@@ -840,7 +897,7 @@ export function createQmuseAppwriteRuntime(options) {
                 });
               }
             }));
-          case 6:
+          case 7:
           case "end":
             return _context18.stop();
         }
@@ -852,35 +909,37 @@ export function createQmuseAppwriteRuntime(options) {
     return _updateRow.apply(this, arguments);
   }
   function _updateRow() {
-    _updateRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee19(_ref10) {
-      var tableId, rowId, data, _yield$getClients4, databaseId;
+    _updateRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee19(_ref12) {
+      var tableId, rowId, data, _yield$getClients4, databaseId, mutationData;
       return _regeneratorRuntime().wrap(function _callee19$(_context19) {
         while (1) switch (_context19.prev = _context19.next) {
           case 0:
-            tableId = _ref10.tableId, rowId = _ref10.rowId, data = _ref10.data;
+            tableId = _ref12.tableId, rowId = _ref12.rowId, data = _ref12.data;
             _context19.next = 3;
             return getClients();
           case 3:
             _yield$getClients4 = _context19.sent;
             databaseId = _yield$getClients4.databaseId;
+            mutationData = sanitizeBusinessRowData(data);
             return _context19.abrupt("return", observeMutation({
               operation: 'update',
               tableId: tableId,
               rowId: rowId,
+              mutationData: sanitizeMutationAuditData(mutationData),
               task: function task() {
                 return withSessionRetry(function () {
                   return tablesDB.updateRow({
                     databaseId: databaseId,
                     tableId: tableId,
                     rowId: rowId,
-                    data: _objectSpread(_objectSpread({}, sanitizeBusinessRowData(data)), {}, {
+                    data: _objectSpread(_objectSpread({}, mutationData), {}, {
                       modifierId: getCurrentUser().$id
                     })
                   });
                 });
               }
             }));
-          case 6:
+          case 7:
           case "end":
             return _context19.stop();
         }
@@ -892,12 +951,12 @@ export function createQmuseAppwriteRuntime(options) {
     return _deleteRow.apply(this, arguments);
   }
   function _deleteRow() {
-    _deleteRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee20(_ref11) {
+    _deleteRow = _asyncToGenerator( /*#__PURE__*/_regeneratorRuntime().mark(function _callee20(_ref13) {
       var tableId, rowId, _yield$getClients5, databaseId;
       return _regeneratorRuntime().wrap(function _callee20$(_context20) {
         while (1) switch (_context20.prev = _context20.next) {
           case 0:
-            tableId = _ref11.tableId, rowId = _ref11.rowId;
+            tableId = _ref13.tableId, rowId = _ref13.rowId;
             _context20.next = 3;
             return getClients();
           case 3:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qmuse/appwrite-runtime-sdk",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "QMuse Appwrite browser runtime SDK",
   "repository": {
     "type": "git",